Static routing in a Netscreen 208

Posted on 2006-07-13
Last Modified: 2012-08-13
We have a Netscreen 208 that's currently in a pretty standard configuration.  Our provider initially set us up with a block of 16 IPs, so we have a default route set up on the untrust interface as follows:

set route interface ethernet3 gateway xx.yy.zz.49

There are a number of static NAT's for the other IP's to servers behind the firewall, nothing fancy.

We needed more IP's so our provider gave us a second block a.b.c.d/28, however this one has a different default gateway, xx.yy.zz.62.  What's the correct way to set up the routing now that we have two gateways on the same network that we need to deal with?  Is it just a matter of ths?

set route a.b.c.d/28 interface ethernet3 gateway xx.yy.zz.62

Or do we need to set up a seperate interface for this new netblock?
Question by:brucepennypacker

Accepted Solution

jabiii earned 50 total points
ID: 17101195
well, being you have a 208, you have plenty of ports to use...
I would just use a second nic on the 208 assign it an ip in that new range, and assign it a route.
ie dual untrust.
LVL 32

Expert Comment

ID: 17102060
With 208, agree with Jim.


Expert Comment

ID: 17105285
I would use another port on the 208 and assign it to the new range and assign it the new default-gateway route.  So I also agree with jabiii and Rajesh.

David   (aka:Pentrix2)

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit If you want to manage em…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question